[Remote] Cybersecurity Manager

Note: The job is a remote job and is open to candidates in USA. Honest Health is a company focused on transforming primary care through purpose and partnership. They are seeking a seasoned cybersecurity professional to manage incidents, develop awareness programs, and collaborate with stakeholders to enhance cybersecurity practices within the organization.

Responsibilities
• Lead and manage the company's incident response processes and team members as the organization grows
• Develop, implement, and maintain incident response plans and procedures
• Coordinate and conduct incident response activities, including detection, analysis, containment, eradication, and recovery
• Investigate security incidents to determine root cause and implement corrective actions
• Ensure timely and effective communication with stakeholders during security incidents
• Operate and improve core security controls (IAM, endpoint security, logging, monitoring, vulnerability management)
• Partner with IT and Platform teams to implement practical, scalable security controls
• Help mature cloud and application security practices (least privilege, secure defaults, audit logging)
• Develop and implement cybersecurity awareness training programs for team members
• Promote a culture of cybersecurity awareness and best practices throughout the organization
• Monitor and measure the effectiveness of cybersecurity awareness initiatives
• Ensure compliance with HIPAA regulations and standards
• Develop, implement, and maintain policies and procedures to protect the confidentiality, integrity, and availability of protected health information (PHI)
• Conduct regular audits and assessments to ensure HIPAA compliance
• Coordinate closely with the Managed Security Service Provider (MSSP) to ensure seamless integration and operation of the Security Operations Center (SOC) and Security Information and Event Management (SIEM) solution
• Collaborate with the MSSP to define and refine alerting thresholds, response procedures, and escalation paths to effectively address security incidents
• Provide direction and guidance to both internal incident response teams and external MSSP/SOC analysts during security incident escalations and threat hunting initiatives
• Participate in vendor security reviews and risk assessments
• Lead cross-functional incident response efforts, bringing together teams from IT, legal, compliance, and other departments to coordinate response activities and mitigate security risks effectively
• Perform other related responsibilities as assigned

Skills
• Bachelor's degree in computer science, information technology, cybersecurity, or a related field is required; Master's degree considered a plus
• 5+ years of experience in cybersecurity incident response, threat hunting, and cybersecurity awareness
• Strong knowledge of cybersecurity frameworks, standards, and best practices (e.g., NIST CSF, ISO 27001, HIPAA)
• Experience with incident response tools and technologies
• Excellent communication, leadership, and problem-solving skills
• Relevant certifications (e.g., CISSP, CISM, GIAC)

Benefits
• Short-term incentives
• Comprehensive benefits package

Company Overview
• Honest Health is the leader in primary care transformation. It was founded in undefined, and is headquartered in Nashville, US, with a workforce of 201-500 employees. Its website is https://honesthealth.com.